Newsletter Archives
-
May 2025 updates are out
Once again it’s the second Tuesday of the month. Time once again for the major “B” week release better known as Patch Tuesday.
Remember at this time we are in test mode only.
KB5058411 is out for Windows 11 24H2. Fixes an issue where the audio form your microphone might mute unexpectedly.
KB5058405 is out for Windows 11 23H2. This includes the following fixes:
- [Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI)] This update applies improvements to SBAT for the detection of Linux systems.
- [Windows Update] Fixed: This update addresses an issue where you might be unable to update to Windows 11, version 24H2 via WSUS. The download might not start or complete, showing error code 0x80240069 and logs with “Service has unexpectedly stopped”.
KB5058379 is for Windows 10 22H2.
More details in next Monday’s newsletter. And now we start testing and looking for issues and side effects.
-
Third party add ins reminder
One of the things that I plan to start adding as a reminder to my patching checklist/to-dos is to check your add-ins. From browser add ins to operating add-ins, all of these third-party tools mean you no longer have a bog-standard operating system and thus will always be needing to be a bit more careful before updating. Depending on what third party tool you are using make sure you check its version against whatever is the latest version on the site you originally downloaded it from.
This is one of the reasons I stick with a limited number of add-ins and then get the ones that will check for updates. For example, I’m a fan of Fences that help you corral your icons on your desktop.
Bottom line: don’t forget to update those first and THEN, update your operating system.
-
Should all BIOS be updated?
This is a follow-up to my Patch Watch column on Monday. Should you update all computer systems and search out a new BIOS? In a word: No.
If you are running Windows 10 on an older computer that will not support Windows 11 or you do not plan to upgrade to Windows 11, and your computer is running just fine, I see no reason to upgrade the BIOS. My advice to seek out and upgrade your BIOS is only for those running Windows 11 23H2 who will be looking to go to 24H2 or are already there.
Updating your BIOS isn’t quite as scary as it used to be, but when you have a functional system that you do not plan on upgrading, I don’t see a reason to. Do you?
-
February 2025 updates are upon us
Nine months and counting befor the end of support (but not end of using) Windows 10. We also have a zero day that Apple released yesterday. The updates include the following:
iOS 18.3.1 fixing a zero day CVE-2025-24200 used in extremely sophisticated attacks. So if you’ve seen headlines about massive risk, actually no, only if you are a CEO or someone high up in an organization.
For Windows 10 22H2, it’s KB5051974 – note the event ID issue with the System Guard runtime monitor service is not fixed with this release.
Windows 11 24H2 – KB5051987 – which I’m still not recommending 24H2 unless you’ve bought a machine with it or you’ve already upgraded and see no issues – has been released.
For Windows 11 23H2 look for KB5051989. Remember at this time we are in test mode only.
Microsoft indicates that the February updates include a fix for the following:
After installing the January 2025 Windows security update released January 14, 2025 (the Originating KBs listed above), you might experience issues with USB audio devices. You are more likely to experience this issue if you are using a USB 1.0 audio driver based DAC (Digital to Analog converter) in your audio setup. This issue might cause USB audio devices to stop working, preventing audio playback.
-
Previews are previews
If you have set your machine to Get the latest updates when they are available in the Windows update settings, congratulations on being a beta tester. These updates are the preview updates of the nonsecurity changes that Microsoft releases in the “D” week, better known as the fourth week of the month. They will be included in the security releases installed next month.
Given my reluctance to be on the cutting/bleeding edge when it comes to my production machines, and not be an unpaid beta tester, I do not recommend this setting unless you like being a beta tester.
Microsoft has released the preview update for Windows 10 (KB5050081) and it includes “New! You now have the new Outlook for Windows app. A new app icon appears in the Apps section on the Start menu, near classic Outlook. There are no changes to any settings or defaults. If you are an IT admin, learn how to manage this update at Control the installation and use of new Outlook.”
For Windows 11, KB5050094 has been released including some gradual rollout items and some regular rollout items.
I do not recommend preview updates on machines unless you are in a beta-testing frame of mind.
-
Master patch listing for January 2025
I’ve updated the master patch list here. It’s the first of the year and I have personally seen one issue whereby I atempted to install 2025-01 Security Update for Windows 10 22H2 KB5050411 along with the main security update and the .net update at the same time. The first time it failed on error 0x80070643. Rescanned and it installed the second time. Confirmed in the forums by PK, and reports on the web seeing the same behavior.
Please note I am not recommending installing updates at this time, we are just testing and reporting.
I am keeping an eye on the other patches released this month. January was a HUGE release. I’m more concerned about business patchers than I am about consumers this month. I’m also honestly looking more forward to February’s release of the “new” Outlook and will be providing guidance on how to proactively deal with that (stay tuned, planning KB posts and video guidance).
As always, thank you all for supporting the cause! Remember we use the “name your price” model where you can choose how much you will pay for a membership. Plus membership gives you full access, And if you donate $50 or more, you’ll get a special code to enable text messages sent to your phone each time the Master Patch List gets updated and when I change the MS-DEFCON level.
More details about these updates in Monday’s newsletter. You are missing out if you don’t sign up. All content is human made with our own blood, sweat, tears, fingers, and brain power — and it’s 100% AI free. Therefore, if I’ve fat fingered any KB numbers or if you have any questions, as always post in the forums and I’ll follow up!
-
January 2025 patches get released
It’s the first of the year and the start of our ten month countdown to end of support (but not end of using) Windows 10. Today’s updates include the following:
Windows 10 22H2 – KB5049981 – also includes an update to the Windows Kernel vulnerable driver blocklist.
Windows 11 23H2 – KB5050021 – This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks.
Windows 11 24H2 – KB5050009 As a reminder I am still not officially recommending using or installing 24H2. I know many of you have but I still have reservations for consumers, gaming platforms and some business uses.
Citrix has documented issue, including a workaround which can be performed prior to installing the January 2025 Windows security update. For details, see Microsoft’s January Security Update Fails/Reverts on a machine with 2411 Session Recording Agent.
Next steps: Microsoft is working with Citrix to address this issue and will update this documentation once a resolution is available.
Just a reminder, I do not recommend installing updates at this time, we are now in test mode.
For Apple, I do recommend installing iOS 18.2.1 released on January 6th.
-
December 2024 Patch Listing
I’ve updated the master patch list here. We’re closing out 2024 and I do not recommend that you install 24H2 at this time even though Microsoft has fixed the issues with Fujitsu scanners and some games.
So far, I’m not seeing anything trending for consumers, but it’s too early right now. I am seeing that once you install 18.2 on iPhones that they warm up a bit as a result of the indexing it appears to do after the phone reboots.
There is a zero day (a vulnerability that has been seen in targeted attacks) in the news referred to as CVE-2024-49138, Windows Common Log File System Driver Elevation of Privilege Vulnerability, but given that the reporting organization is from CrowdStrike, it appears this is a targeted attack seen in businesses, not consumers. Bottom line don’t panic. I will let you know if I see a compelling reason to immediately patch. At this this time I do not recommend we change from our normal process to test before installing updates and to ensure there are no major side effects or issues.
As always, thank you all for supporting the cause! Remember we use the “name your price” model where you can choose how much you will pay for a membership. Plus membership gives you full access, And if you donate $50 or more, you’ll get a special code to enable text messages sent to your phone each time the Master Patch List gets updated and when I change the MS-DEFCON level.
More details about these updates in Monday’s newsletter. You are missing out if you don’t sign up. All content is human made with our own blood, sweat, tears, fingers, and brain power — and it’s 100% AI free. Therefore, if I’ve fat fingered any KB numbers or if you have any questions, as always post in the forums and I’ll follow up!
-
October 2024 Master patch list
With Hurricane Milton still causing issues and just being too close to Patch Tuesday, once again I don’t recommend installing updates at this time. I’ve updated the master patch list here. Nor do I recommend that you install 24H2 at this time.
So far, I’m not seeing anything trending for consumers, but it’s too early right now. For now, I’ll urge you to ensure your browser is up to date and your devices and phones, but to hold off on Microsoft updates.
As always, thank you all for supporting the cause! Remember we use the “name your price” model where you can choose how much you will pay for a membership . Plus membership gives you access and if you donate $50 or more you’ll get a special code to enable text messages sent to your phone each time the Master Patch List gets updated and when I change the MS-DEFCON level.
More details about these updates in Monday’s newsletter. You are missing out if you don’t sign up. All content is human made with our own blood, sweat, tears, fingers and brain power and 100% AI free. Therefore, if I’ve fat fingered any KB numbers or if you have any questions, as always post in the forums and I’ll follow up!
-
October updates are out
Before we begin with the normal discussion of patches and their side effects, a word. To any reader in the path of Milton, my thoughts are with you. This is a huge storm. I have friends in the area and I know I’m worried on their behalf. Stay safe. Please take care.
Now onto the release of updates. You know already my philosophy regarding updating – always hold back. Today even more so if you are in the path of the hurricane.
I am old enough to remember when a new version was released that the FIRST Patch Tuesday it saw, that release would get no security fixes or bug fixes.
Highlights for Windows 11, version 24H2:
•Addresses an issue with the Remote Desktop Gateway Service that causes the service to stop responding.Windows 11 release notes:
•Version 24H2 (KB5044284):
•Version 22H2 & 23H2 (KB5044285):
•Version 21H2 (KB5044280):Windows 10:
22H2 – KB5044273.NET has security releases today
-
September 2024 Master Patch List
Once again I don’t recommend installing updates at this time. I’ve updated the master patch list here.
So far, I’m not seeing anything trending but it’s too early right now. For now, I’ll urge you to ensure your browser is up to date and your devices and phones, but to hold off on Microsoft updates.
As always, thank you all for supporting the cause! Remember we use the “name your price” model where you can choose how much you will pay for a membership . Plus membership gives you access and if you donate $50 or more you’ll get a special code to enable text messages sent to your phone each time the Master Patch List gets updated and when I change the MS-DEFCON level.
More details about these updates in Monday’s newsletter. You are missing out if you don’t sign up. All content is human made with our own blood, sweat, tears, fingers and brain power and 100% AI free. Therefore, if I’ve fat fingered any KB numbers or if you have any questions, as always post in the forums and I’ll follow up!
-
Sept 2024 updates are on us
…well for Microsoft anyway. I’m keeping an eye out for both the 24H2 release and the Apple releases. Yesterday’s Apple phone announcements were a bit ho hum. If you have a working phone where the battery is good there really wasn’t enough compelling enticements.
Airpods pro 2 will be featuring a hearing aid enhancement that will come via a software update coming this fall. But it’s not out now. For now just make sure your existing Apple devices are up to date.
If you are in the Google Android ecosystem, the September android security bulletin fixed several zero days. Remember that while Google pixel has released patches, your specific device may not have the September updates yet. Remember to open your device settings app and navigate to the bottom, check what Android version, security update and build number you have. You can also select system and software update from the settings app to initiate any available security updates.
Meanwhile back in the real world of actual hardware and released software updates, here is what we are facing from Mothership Microsoft today.
If you use Publisher (yes there are some still out there) there is a patch out today for vulnerabilities being used in active attacks.
Windows 10 22h2 gets KB5043064
Windows 11 23H2 gets KB5043076
Windows 11 22H2 drops out of support next month for Windows Home and Pro editions so make sure you are on 23H2.
The performance issues on Server 2019 triggered by the August updates are now fixed in the September updates.
Also Adobe is out with the following fixes: APSB24-53 : Security update available for Adobe Media Encoder, APSB24-54 : Security update available for Adobe Audition, APSB24-55 : Security update available for Adobe After Effects, APSB24-58 : Security update available for Adobe Premiere Pro, APSB24-66 : Security update available for Adobe Illustrator, APSB24-70 : Security update available for Adobe Acrobat Reader, APSB24-71 : Security update available for Adobe ColdFusion, APSB24-72 : Security update available for Adobe Photoshop